@deepseek-insight/dsi 0.5.5

package/build/server/chunks/entries/endpoints/api/dsh/sessions/_server.ts.js-17yKojU_.js

@@ -0,0 +1,85 @@
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/sessions/+server.ts
+/**
+* api-dsh — GET /api/dsh/sessions · POST /api/dsh/sessions
+*
+* GET: the live session list (DsiSessionSummary rows) + the workspace
+* registry + the full preset catalog. The browser never reaches the DSH
+* Host directly (BC-1); this route is its only view of session.list,
+* workspace.list, and agentPreset.list (BC-6: wire bytes live behind
+* dsh-connection → dsh-rpc).
+*
+* POST (POC-2 W3, self-sufficiency): create a session on the host through
+* the same choke point. Body {agentPreset?} → {ok:true, sessionId, agentPreset}.
+*/
+var GET = async () => {
+	try {
+		const conn = getDshConnection();
+		const [sessions, workspaces, presets] = await Promise.all([
+			conn.listSessions(),
+			conn.listWorkspaces(),
+			conn.listPresets()
+		]);
+		return json({
+			ok: true,
+			sessions: sessions.items,
+			workspaces: workspaces.items,
+			presets: presets.presets
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+var POST = async ({ request }) => {
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({
+			ok: false,
+			error: {
+				code: "bad-json",
+				message: "request body is not valid JSON"
+			}
+		}, { status: 400 });
+	}
+	const agentPreset = body?.agentPreset;
+	if (agentPreset !== void 0 && typeof agentPreset !== "string") return json({
+		ok: false,
+		error: {
+			code: "bad-preset",
+			message: "agentPreset must be a string"
+		}
+	}, { status: 400 });
+	const cwd = body?.cwd;
+	if (cwd !== void 0 && (typeof cwd !== "string" || cwd.length === 0)) return json({
+		ok: false,
+		error: {
+			code: "bad-cwd",
+			message: "cwd must be a non-empty string"
+		}
+	}, { status: 400 });
+	try {
+		const created = await getDshConnection().createSession(cwd === void 0 ? void 0 : cwd, agentPreset === void 0 || agentPreset === "" ? void 0 : agentPreset);
+		return json({
+			ok: true,
+			sessionId: created.sessionId,
+			agentPreset: created.agentPreset ?? null
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { GET, POST };
+//# sourceMappingURL=_server.ts.js-17yKojU_.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspace-file/_server.ts.js-D16pEhvd.js

@@ -0,0 +1,99 @@
+import { g as getDshConnection, D as DshRpcError, m as mapRpcFailure, s as statusFor } from '../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/workspace-file/+server.ts
+/**
+* api-dsh — GET /api/dsh/workspace-file?sessionId=…&path=…&offset=…&limit=…
+*
+* One page of one real workspace file (Workspace Explorer W2, 2026-09-10
+* ADR D2): the ONE module that touches host file bytes. The browser never
+* reaches the DSH Host directly (BC-1); the read rides dsh-rpc →
+* workspaceFiles/read, whose host side confines the path to the session's
+* workspace root by containment. Every host refusal maps to an HTTP status
+* so a file panel never renders blank (Karpathy Layer 2 failure condition):
+*
+*   workspace-file/not-found        → 404
+*   workspace-file/outside-workspace → 403
+*   workspace-file/too-large        → 413
+*   workspace-file/not-text
+*   workspace-file/not-regular-file → 415
+*   any other DshRpcError           → 502 (host answered, we relay)
+*   transport failure               → 503 host-unreachable
+*/
+/** Refusal code → HTTP status for the panel's failure line. */
+var REFUSAL_STATUS = {
+	"workspace-file/not-found": 404,
+	"workspace-file/outside-workspace": 403,
+	"workspace-file/too-large": 413,
+	"workspace-file/not-text": 415,
+	"workspace-file/not-regular-file": 415
+};
+/** Positive-integer query param: undefined when absent, 'bad' when malformed. */
+function pageParam(raw) {
+	if (raw === null) return void 0;
+	if (!/^\d+$/.test(raw) || Number(raw) < 1) return "bad";
+	return Number(raw);
+}
+var GET = async ({ url }) => {
+	const sessionId = url.searchParams.get("sessionId");
+	if (sessionId === null || sessionId.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-session",
+			message: "sessionId is required"
+		}
+	}, { status: 400 });
+	const path = url.searchParams.get("path");
+	if (path === null || path.length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-path",
+			message: "path is required"
+		}
+	}, { status: 400 });
+	const offset = pageParam(url.searchParams.get("offset"));
+	if (offset === "bad") return json({
+		ok: false,
+		error: {
+			code: "bad-offset",
+			message: "offset must be a positive integer"
+		}
+	}, { status: 400 });
+	const limit = pageParam(url.searchParams.get("limit"));
+	if (limit === "bad") return json({
+		ok: false,
+		error: {
+			code: "bad-limit",
+			message: "limit must be a positive integer"
+		}
+	}, { status: 400 });
+	try {
+		const conn = getDshConnection();
+		const owner = await conn.workspaceOwnerSessionId(sessionId);
+		const file = await conn.readWorkspaceFile(owner, path, offset === void 0 && limit === void 0 ? void 0 : {
+			offset,
+			limit
+		});
+		return json({
+			ok: true,
+			file
+		});
+	} catch (err) {
+		if (err instanceof DshRpcError) {
+			const mapped = REFUSAL_STATUS[err.code];
+			if (mapped !== void 0) return json(mapRpcFailure(err), { status: mapped });
+		}
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-D16pEhvd.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspace-file/save/_server.ts.js-BXpZNLK8.js

@@ -0,0 +1,110 @@
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/lib/services/panels/delegated-save.ts
+/**
+* delegated-save — the pure composer behind the file panel's Save button
+* (ADR "The Delegated Save", 2026-09-11, D1/D2): the save is a PLAIN user
+* turn — "update this file to exactly this content" — delivered through
+* the session prompt route, so the write crosses the agent's own sandbox,
+* approval, and session-log path. This module owns the PINNED turn
+* wording: operator-visible model input, unit-tested verbatim.
+*/
+/** The literal fence lines the composed turn wraps the content in. */
+var CONTENT_BEGIN = "CONTENT-BEGIN";
+var CONTENT_END = "CONTENT-END";
+/**
+* Compose the delegated save turn.
+* @param path - the file's root-relative path (the panel's `path` prop).
+* @param content - the editor buffer, embedded VERBATIM between the
+*        fence markers — every character, including a trailing newline,
+*        is content the agent must write.
+* @returns the turn text; a plain user turn, indistinguishable on the
+*        wire from the operator typing the request.
+*/
+function delegatedSaveTurn(path, content) {
+	return [
+		"Update the workspace file \"" + path + "\" to EXACTLY the following content.",
+		"Replace the whole file: do not append, do not truncate, do not reformat,",
+		"do not add or remove a trailing newline. Between the CONTENT-BEGIN",
+		"and CONTENT-END markers below, every character is literal file content.",
+		"",
+		CONTENT_BEGIN,
+		content,
+		CONTENT_END,
+		"",
+		"When the file is written, reply with the path you wrote and nothing else."
+	].join("\n");
+}
+//#endregion
+//#region src/routes/api/dsh/workspace-file/save/+server.ts
+/**
+* api-dsh — POST /api/dsh/workspace-file/save
+*
+* The Delegated Save (ADR "The Delegated Save", 2026-09-11, D1/D3): the
+* file panel's Save button does NOT write bytes — it composes a plain
+* user turn (delegated-save.ts) and injects it into the session's ROOT
+* owner, so the write crosses the agent's own sandbox + approval + log
+* path. Returns after the receipt only (the prompt route's BC-3
+* boundary): {accepted:true} or a mapped RPC error. DSI never touches
+* disk and never proves bytes landed — the receipt is acceptance, not
+* effect (ADR D5).
+*/
+var POST = async ({ request }) => {
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({
+			ok: false,
+			error: {
+				code: "bad-json",
+				message: "request body is not valid JSON"
+			}
+		}, { status: 400 });
+	}
+	const { sessionId, path, content } = body ?? {};
+	if (typeof sessionId !== "string" || sessionId.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-session",
+			message: "sessionId is required"
+		}
+	}, { status: 400 });
+	if (typeof path !== "string" || path.length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-path",
+			message: "path is required"
+		}
+	}, { status: 400 });
+	if (typeof content !== "string") return json({
+		ok: false,
+		error: {
+			code: "bad-content",
+			message: "content must be a string"
+		}
+	}, { status: 400 });
+	try {
+		const conn = getDshConnection();
+		const owner = await conn.workspaceOwnerSessionId(sessionId);
+		const receipt = await conn.prompt(owner, delegatedSaveTurn(path, content));
+		return json({
+			ok: true,
+			accepted: receipt.accepted === true
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-BXpZNLK8.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspace-file-bytes/_server.ts.js-hBlyjq-x.js

@@ -0,0 +1,113 @@
+import { g as getDshConnection, D as DshRpcError, m as mapRpcFailure, s as statusFor } from '../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/workspace-file-bytes/+server.ts
+/**
+* api-dsh — GET /api/dsh/workspace-file-bytes?sessionId=…&path=…
+*
+* Binary workspace file read (2026-09-10): images and other non-text
+* files refused by workspaceFiles/read (workspace-file/not-text) read
+* through workspaceFiles/readBytes — base64 byte windows on the wire,
+* paged here until eof and re-joined into one binary Response the
+* browser renders with an <img> element. Refusal mapping follows the
+* workspace-file route: not-found → 404, outside-workspace → 403,
+* not-regular-file → 415, other DshRpcError → 502, transport → 503.
+*/
+/** The extensions DSI previews as images; anything else refuses 415. */
+var IMAGE_MIME = {
+	png: "image/png",
+	jpg: "image/jpeg",
+	jpeg: "image/jpeg",
+	gif: "image/gif",
+	webp: "image/webp",
+	svg: "image/svg+xml",
+	bmp: "image/bmp",
+	ico: "image/x-icon",
+	avif: "image/avif"
+};
+/** Byte window per readBytes call — bounded so one huge file cannot
+*  balloon the response; the window count cap below is the real bound. */
+var WINDOW_BYTES = 524288;
+/** 64 windows × 512 KiB = the 32 MiB per-request ceiling. */
+var MAX_WINDOWS = 64;
+var MIME_BY_EXT = (path) => {
+	return IMAGE_MIME[path.split(".").pop()?.toLowerCase() ?? ""] ?? null;
+};
+/** Refusal code → HTTP status, identical to the workspace-file route. */
+var REFUSAL_STATUS = {
+	"workspace-file/not-found": 404,
+	"workspace-file/outside-workspace": 403,
+	"workspace-file/not-regular-file": 415
+};
+var GET = async ({ url }) => {
+	const sessionId = url.searchParams.get("sessionId");
+	if (sessionId === null || sessionId.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-session",
+			message: "sessionId is required"
+		}
+	}, { status: 400 });
+	const path = url.searchParams.get("path");
+	if (path === null || path.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-path",
+			message: "path is required"
+		}
+	}, { status: 400 });
+	const mime = MIME_BY_EXT(path);
+	if (mime === null) return json({
+		ok: false,
+		error: {
+			code: "bad-ext",
+			message: "not a previewable image extension"
+		}
+	}, { status: 415 });
+	try {
+		const conn = getDshConnection();
+		const owner = await conn.workspaceOwnerSessionId(sessionId);
+		const chunks = [];
+		let offset = 0;
+		for (let window = 0; window < MAX_WINDOWS; window++) {
+			const page = await conn.readWorkspaceFileBytes(owner, path, {
+				offset,
+				length: WINDOW_BYTES
+			});
+			const buf = Buffer.from(page.data, "base64");
+			if (buf.length > 0) chunks.push(buf);
+			if (page.eof) {
+				const body = Buffer.concat(chunks);
+				return new Response(new Uint8Array(body), { headers: {
+					"content-type": mime,
+					"cache-control": "no-store"
+				} });
+			}
+			offset += buf.length;
+		}
+		return json({
+			ok: false,
+			error: {
+				code: "too-many-windows",
+				message: "file exceeds the preview ceiling"
+			}
+		}, { status: 413 });
+	} catch (err) {
+		if (err instanceof DshRpcError) {
+			const mapped = REFUSAL_STATUS[err.code];
+			if (mapped !== void 0) return json(mapRpcFailure(err), { status: mapped });
+		}
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-hBlyjq-x.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspace-tree/_server.ts.js-KWRnsAkm.js

@@ -0,0 +1,59 @@
+import { g as getDshConnection, D as DshRpcError, m as mapRpcFailure, s as statusFor } from '../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/workspace-tree/+server.ts
+/**
+* api-dsh — GET /api/dsh/workspace-tree?sessionId=…&path=…
+*
+* One directory level inside the session's workspace (Workspace Explorer
+* bugfix 2026-09-09): the LIVE tree lists through workspaceFiles/list —
+* session-authorized and workspace-confined — because the picker's
+* directoryPicker/list is native-only on real hosts (the live refusal
+* this route replaces: "the composed picker serves \"native\""). path is
+* workspace-relative; '' lists the root itself. Refusal mapping follows
+* the workspace-file route: not-found → 404, outside-workspace → 403,
+* not-directory → 415, other DshRpcError → 502, transport → 503.
+*/
+/** Refusal code → HTTP status for the tree's failure row. */
+var REFUSAL_STATUS = {
+	"workspace-file/not-found": 404,
+	"workspace-file/outside-workspace": 403,
+	"workspace-file/not-directory": 415
+};
+var GET = async ({ url }) => {
+	const sessionId = url.searchParams.get("sessionId");
+	if (sessionId === null || sessionId.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-session",
+			message: "sessionId is required"
+		}
+	}, { status: 400 });
+	const path = url.searchParams.get("path") ?? "";
+	try {
+		const conn = getDshConnection();
+		const owner = await conn.workspaceOwnerSessionId(sessionId);
+		const listing = await conn.listWorkspaceDirectory(owner, path);
+		return json({
+			ok: true,
+			listing
+		});
+	} catch (err) {
+		if (err instanceof DshRpcError) {
+			const mapped = REFUSAL_STATUS[err.code];
+			if (mapped !== void 0) return json(mapRpcFailure(err), { status: mapped });
+		}
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts.js-KWRnsAkm.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspaces/_server.ts.js-DzNvvCxK.js

@@ -0,0 +1,55 @@
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/workspaces/+server.ts
+/**
+* api-dsh — POST /api/dsh/workspaces
+*
+* Workspace registry adoption (2026-08-23, DSH "Add workspace" parity):
+* the sidebar header button's carrier. Body {path} → host workspace.create
+* → {ok:true, workspace, created}. The browser never reaches the DSH Host
+* directly (BC-1); wire bytes live behind dsh-connection (BC-6).
+*/
+var POST = async ({ request }) => {
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({
+			ok: false,
+			error: {
+				code: "bad-json",
+				message: "request body is not valid JSON"
+			}
+		}, { status: 400 });
+	}
+	const path = body?.path;
+	if (typeof path !== "string" || path.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-path",
+			message: "path must be a non-empty string"
+		}
+	}, { status: 400 });
+	try {
+		const result = await getDshConnection().createWorkspace(path);
+		return json({
+			ok: true,
+			workspace: result.workspace,
+			created: result.created
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-DzNvvCxK.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspaces/_workspaceId_/delete/_server.ts.js-MK5925CY.js

@@ -0,0 +1,45 @@
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/workspaces/[workspaceId]/delete/+server.ts
+/**
+* api-dsh — POST /api/dsh/workspaces/[workspaceId]/delete
+*
+* Chip Menu ADR D3: the workspace chip's Delete action (confirmed
+* client-side, ADR D2). No body → host workspace/delete →
+* {ok:true, workspaceId}. The host removes ONLY the registry row —
+* sessions survive and turn ghost (ADR D2's honest cost copy states
+* this in the UI). Refusals map through mapRpcFailure (502).
+* The browser never reaches the DSH Host directly (BC-1); wire bytes
+* live behind dsh-connection (BC-6).
+*/
+var POST = async ({ params }) => {
+	const workspaceId = params.workspaceId;
+	if (typeof workspaceId !== "string" || workspaceId.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-workspace-id",
+			message: "workspaceId must be a non-empty string"
+		}
+	}, { status: 400 });
+	try {
+		const result = await getDshConnection().deleteWorkspace(workspaceId);
+		return json({
+			ok: true,
+			workspaceId: result.workspaceId
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-MK5925CY.js.map

package/build/server/chunks/entries/endpoints/api/dsh/workspaces/_workspaceId_/rename/_server.ts.js-w3Mo0nf7.js

@@ -0,0 +1,63 @@
+import { g as getDshConnection, s as statusFor, m as mapRpcFailure } from '../../../../../../../chunks/dsh-connection.js-DwihVtk_.js';
+import { j as json } from '../../../../../../../chunks/utils.js-tOWCe9Wk.js';
+import '../../../../../../../chunks/config.js-BBYogCe7.js';
+import '../../../../../../../chunks/insight-config.js-CfMPTA6Z.js';
+import 'node:fs';
+import 'node:path';
+import 'node:os';
+import 'yaml';
+import '../../../../../../../chunks/shared.js-C4-Py8s_.js';
+import '../../../../../../../chunks/uneval.js-BJ9Qq2SF.js';
+
+//#region src/routes/api/dsh/workspaces/[workspaceId]/rename/+server.ts
+/**
+* api-dsh — POST /api/dsh/workspaces/[workspaceId]/rename
+*
+* Chip Menu ADR D3: the workspace chip's Rename action. Body {title} →
+* host workspace/rename → {ok:true, workspace}. Refusals map through
+* mapRpcFailure (workspace/not-found, workspace/name-conflict → 502).
+* The browser never reaches the DSH Host directly (BC-1); wire bytes
+* live behind dsh-connection (BC-6).
+*/
+var POST = async ({ params, request }) => {
+	const workspaceId = params.workspaceId;
+	if (typeof workspaceId !== "string" || workspaceId.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-workspace-id",
+			message: "workspaceId must be a non-empty string"
+		}
+	}, { status: 400 });
+	let body;
+	try {
+		body = await request.json();
+	} catch {
+		return json({
+			ok: false,
+			error: {
+				code: "bad-json",
+				message: "request body is not valid JSON"
+			}
+		}, { status: 400 });
+	}
+	const title = body?.title;
+	if (typeof title !== "string" || title.trim().length === 0) return json({
+		ok: false,
+		error: {
+			code: "bad-title",
+			message: "title must be a non-empty string"
+		}
+	}, { status: 400 });
+	try {
+		const result = await getDshConnection().renameWorkspace(workspaceId, title.trim());
+		return json({
+			ok: true,
+			workspace: result.workspace
+		});
+	} catch (err) {
+		return json(mapRpcFailure(err), { status: statusFor(err) });
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts.js-w3Mo0nf7.js.map